Numéro d’ID de bogue |
BUG-000109333 |
Envoi | November 6, 2017 |
Dernière modification | June 5, 2024 |
S’applique à | ArcGIS Online |
Version trouvée | 5.3 |
Statut | Known Limit
Après examen par l’équipe de développement, il a été déterminé que ce problème est lié à une limitation connue du logiciel sur laquelle Esri n’a aucun contrôle. Pour d’autres explications, reportez-vous à la section Informations supplémentaires correspondant au problème.
|
Informations supplémentaires
The behavior in this issue is the normal security strategy by design, not a bug.
Token-based authentication
When the locally hosted app wants to access the online item, including web map item and its secured layers, it must send a request to "https://www.arcgis.com/sharing/generateToken" to get the token. The token itself contains your credential and other necessary information.
When printing the map, the token will be sent to the print service. The problem is that the token is generated only for the host machine of the app which is controlled by the following request parameters:
origin:http://**.local:5000
referer:http://**.local:5000/USA_secure/
The print service is hosted on another server, so it cannot use the token directly.
OAuth authentication
When using OAuth authentication, users must create a registered app and assign the appId to the locally hosted WAB app. When users log in, they will also get a token, but this token is different from the token in token-based authentication.
When the service receives such a request, it checks users' credential against the registered app. The service works if the registered app says "OK, the token is issued from here".
Étapes pour reproduire
ID de bogue: BUG-000109333
Logiciel: